waaseyaa / http-client

v0.1.0-alpha.303 2026-09-30 09:37 UTC

Requires

• php: >=8.5
• symfony/http-client: ^7.4
• symfony/http-client-contracts: ^3.0

Requires (Dev)

• phpunit/phpunit: ^13.0

GPL-2.0-or-later

Published on Packagist.org on 2026-10-01 20:16 UTC

README

Layer 0 — Foundation

Minimal HTTP client for JSON APIs and webhooks.

HttpClientInterface exposes a generic request(string $method, string $url, …) plus get() / post() convenience helpers — other verbs (PUT/DELETE/PATCH/…) go through request(); there are no dedicated put()/delete()/patch() methods. StreamHttpClient is the production implementation backed by PHP streams. Returns HttpResponse value objects (no shared state) and throws HttpRequestException on transport failures, including response bodies that exceed the configured size ceiling or end before their declared Content-Length. Designed as an injectable seam — tests replace HttpClientInterface with a fake rather than mocking PHP's stream layer.

SymfonyHttpClient is an additive implementation using maintained Symfony networking. Its constructor selects a total network transfer budget and maximum decoded body size. It uses verified TLS, no redirects or retries, streams with buffering disabled, refuses overflow and incomplete transfers, and returns non-success HTTP statuses for the caller to interpret. Failure messages omit upstream diagnostics; the URL and method remain in the existing typed exception properties. The optional Symfony client argument is a trusted integration/test seam and must preserve the configured transport guarantees.

Key classes: HttpClientInterface, StreamHttpClient, SymfonyHttpClient, HttpResponse, HttpRequestException.

Response framing boundary

HEAD, 1xx, 204, and 304 responses have an empty body regardless of metadata Content-Length. Other length-delimited bodies stop at that length without waiting for the peer to close the connection. EOF before the declared length and timeouts while reading that body fail closed.

PHP's HTTP wrapper dechunks responses and removes Transfer-Encoding before exposing the stream. The byte ceiling still applies to decoded chunked bodies, but this transport cannot independently detect a missing chunk terminator. For connection-close bodies, EOF defines completion; no independent expected length is available. This change does not claim to validate those hidden framing cases.